Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa
File:                     uRbDK03eXvXuybDY6ySDPk2j8jw.roa (raw, json)
Hash identifier:          B7oHGHMZn6dcANuLv7P1ig3TcmZcB2OnwrCmsBplg3A=
Subject key identifier:   B9:16:C3:2B:4D:DE:5E:F5:EE:C9:B0:D8:EB:24:83:3E:4D:A3:F2:3C
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       01941FFA74D77185012191AC7EF6E8E5F5BC
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa
Signing time:             Wed 01 Jan 2025 03:48:15 +0000
ROA not before:           Wed 01 Jan 2025 03:48:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61256
IP address blocks:        82.160.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:74:d7:71:85:01:21:91:ac:7e:f6:e8:e5:f5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  1 03:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b916c32b4dde5ef5eec9b0d8eb24833e4da3f23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:f6:ee:74:9c:42:22:c2:5a:00:4a:4e:7a:
                    05:fc:0c:26:69:5a:21:16:d2:8a:31:64:6f:1d:36:
                    26:a0:e8:2a:49:2c:a7:c8:e7:44:a2:8c:86:bf:67:
                    48:25:97:ab:87:2e:d2:ee:8f:71:40:09:b5:dc:4e:
                    da:ec:82:4d:0e:ac:4e:d9:ec:42:57:b0:f7:88:71:
                    4e:de:3b:17:6c:25:23:47:3c:04:7a:7b:60:53:e0:
                    da:88:39:30:2a:e1:0a:04:2b:38:ab:5c:c8:04:86:
                    ce:85:8f:3a:30:a4:f3:11:78:4c:83:c3:bf:d7:43:
                    3b:bc:b1:e4:10:b4:b0:f2:7d:7c:34:4e:04:65:7a:
                    35:1e:44:10:f9:2f:27:97:0f:6c:8e:90:35:0d:3b:
                    e6:24:1e:13:cb:9d:b3:9a:df:02:4a:a7:8c:4f:4e:
                    ab:2b:2e:78:f3:46:32:b8:cc:a5:6f:3e:c9:0f:54:
                    0b:ba:10:a3:73:03:d5:51:8c:a4:61:de:76:3e:35:
                    a1:86:ef:8c:d2:ed:22:c5:1d:7e:c4:ee:08:04:11:
                    09:c9:4b:f3:2e:73:89:aa:ae:94:b9:1f:96:e0:b6:
                    d5:1d:e0:24:1d:24:35:26:1f:7b:3e:ff:bd:ef:09:
                    51:53:2a:0b:95:92:ad:7e:80:b9:ff:b8:92:c4:a2:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:C3:2B:4D:DE:5E:F5:EE:C9:B0:D8:EB:24:83:3E:4D:A3:F2:3C
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.160.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:aa:a5:9d:85:09:0f:a1:46:0b:8d:c3:42:d6:3e:73:c4:
         82:2c:18:f3:ea:6f:fc:cc:96:fe:6c:c1:02:ec:05:ad:8a:6d:
         87:0c:af:76:5b:2a:0e:6e:c4:6d:8d:54:5c:7a:1c:ae:1d:d5:
         06:9b:6b:c2:3f:fd:3f:f2:b1:cf:99:a5:ac:97:61:e2:6b:18:
         b8:60:39:7e:ba:94:a2:43:73:7e:a5:4d:fe:1e:69:45:53:f1:
         c2:93:e5:28:df:a9:46:e0:1a:a3:62:76:e6:6e:d6:d2:3d:e9:
         de:01:b8:00:b2:d7:a9:33:c1:2f:b1:dc:a2:ec:c3:12:e8:a2:
         eb:e6:a2:5c:59:5b:98:5e:93:91:95:f0:0d:f4:62:f1:b3:53:
         ff:df:c0:75:d5:9e:af:9b:9c:05:80:a3:11:a4:75:e9:fa:ba:
         72:cc:6d:2f:ac:6f:08:9e:3c:04:36:68:76:2e:66:14:32:96:
         a4:bc:fe:c8:0d:9e:4c:d8:0c:79:45:d8:49:ec:23:5f:3b:b5:
         d9:84:5d:db:6b:44:3b:de:98:08:98:1e:39:cd:f7:e9:12:c3:
         1d:bf:a8:1b:46:39:7b:0f:b3:a7:13:12:71:c2:24:89:7e:72:
         f3:63:9a:76:32:0f:73:5a:f3:7d:cb:3e:b4:ae:a8:26:8b:08:
         a0:1f:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net